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EMORANDUM FOR DIRECTOR, COMMUNICATIONS SYSTEMS DIRECTORATE 
DIRECTOR, OFFICE OF CONTRACTS 
DIRECTOR, OFFICE OF SECURITY AND COUNTERINTELLIGENCE 

















SUBJECT: (U) Final Report: Audit of the National Reconnaissance 
Office Management of the Silver Eagle Contract 
(Project Number 2014-003 A) 





(U) The National Reconnaissance Office (NRO) Office of Inspector 
General (OIG) final report on the Audit of the NRO Management of the 
Silver Fagle Contract is attached. I am providing this report for 
your information and implementation of the recommendations. I 
appreciate the responses to the draft report. We will continue to 
work with you to ensure your remediation plan meets the intent of the 
findings and recommendations. 


(U/7POSO+ I also appreciate the courtesies extended to my staff 
































during this audit. Please direct any questions you may have regarding 

this audit to me at fsecure) or to the Assistant Inspector 

General for Audits at (secure). Direct any questions (b)(3) 
regarding corrective action reporting to the OIG Follow-up 

Administrator, at (secure). 























Acting Inspector General 


Attachment: 

(U) Final Audit Report 
(Project Number 2014-003 A) 
(U/ obe- 
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DNRO 
PDDNRO 
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EXECUTIVE SUMMARY 
(U) Audit of the NRO Management of the 
Silver Eagle Contract 


























(U) Why the OIG Did This Audit 


(U/FECCr The Silver Eagle contract provides vital 
enterprise Information Technology (IT) support for 
government-owned network systems and equipment at 











over 














The approved Silver 








Eagle performance objectives are fo (b)(3) 


® improve performance and customer service; 

e control costs; 

® incorporate cutting edge information technology 
and telecommunications technologies; and 

e adjust resources due to efficiencies and changing 
requirements. 


(U/FE8O)When the NRO migrated to Silver Eagle in 
2011, NRO management requested the closure of the 
remaining open recommendations from the OIG 2007 
audit report of the Patriot contract. In closing the 
recommendations, the OIG notified NRO management 
of the obligation to conduct follow up on _ the 
implementation of the recommendations through an 
audit of the Silver Eagle contract. 


(UFFE06} The objective of this audit was to assess 
whether the NRO is overseeing and verifying the Silver 
Eagle contractor’s performance of IT enterprise services 
in accordance with contract requirements. During our 
audit planning work, the OIG could not trace the Silver 
Eagle Statement of Work acquisition objectives to 
contract requirements. Therefore, the OIG determined 
that the Silver Eagle acquisition strategy merited a more 
comprehensive assessment of the contract requirements 
and the oversight and verification of contractor 
performance. 


(U) What the OIG Found 


(UFFOELQ) Overall, the OIG found that the NRO 
provides only limited oversight and verification in 
determining that the Silver Eagle contractor performance 
is meeting intended telecommunications and IT 
responsibilities. The NRO needs to define the Silver 
Eagle performance objectives in terms of contract 
requirements and contract oversight processes. 
Specifically, the NRO acquisition planning and Silver 
Eagle contract oversight processes did not include 
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e implementing an acquisition strategy that 
defined and traced the performance objectives to 
contract performance and oversight 
requirements; 

e engaging stakeholders in defining the 
requirements and quality standards to include 
measuring customer satisfaction; and 

e valid Firm Fixed Priced (FFP) baselines, the 
methodology for verifying FFP receipt of goods 
and services, or establishing the basis for FFP 
payments. 


(UPFELQ) Consequently, the NRO may not achieve the 
approved contract objectives to improve performance 
and customer service, control costs, incorporate “cutting 
edge” IT telecommunications technologies, and adjust 
resources due to efficiencies and changing requirements 
on future IT services efforts. 


(U) What the OIG Recommends 


(U/AROLQ) The OIG recommends that the NRO assess 
the Silver Eagle contract to ensure the current contract 
requirements align to approved performance objectives, 
improve future IT enterprise services, and measure and 
report contract progress in meeting or exceeding 
performance objectives and stakeholder expectations. In 
addition, the OIG recommends that the NRO implement 
an oversight and contract payment plan that ensures 
accountability and proper payments for contractor 
performance. Find a complete list of recommendations 


(U) Management Comments 


(U) The Director, Communications Systems Directorate 
(COMM) reviewed a draft of this report and concurred 
with the findings and recommendations presented. The 
Director, COMM plans to meet the intent of the 
recommendations. Prior to the issuance of this final 
report, Director, COMM took actions that closed four 
recommendations. As part of our follow-up process, we 
will monitor the status of the corrective action plans for 
the remaining recommendations through full 
implementation. Complete copies of the management 
comments can be found in APPENDIX F. 
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(U) NATIONAL RECONNAISSANCE OFFICE 
OFFICE OF INSPECTOR GENERAL 


(U/7FOQ) Audit of the National Reconnaissance Office Management 
of the Silver Eagle Contract (Project Number 2014-003 A) 


(U) INTRODUCTION 


(U//FOEUQ) The National Reconnaissance Office (NRO) Office of Inspector General 
(OIG) performed an audit of the NRO Management of the Silver Eagle contract. The Silver 
Eagle contract provides vital enterprise Information Technology (IT) support for government- 
owned network systems and equipment at ovel ata (b)(3) 




















The objective of this audit was to assess whether the NRO is overseeing (b)(3) 





and verifying the contractor’s performance of IT enterprise services in accordance with contract 
requirements. 


(U//FORQ) When the NRO migrated to Silver Eagle in 2011, NRO management 
requested the closure of the remaining open recommendations from the OIG 2007 audit report 
of the predecessor contract to Silver Eagle. In closing the recommendations, the OIG notified 
NRO management of the obligation to conduct follow-up on the implementation of the 
recommendations through an audit of the Silver Eagle contract. 


(U) BACKGROUND 


(U) Responsibility for NRO Telecommunications and IT Services 





(U//FOVOQ) During the acquisition planning for Silver Eagle in 2010, the Mission 
Operations Directorate, (MOD was responsible for providing (b)(3) 
secure, reliable telecommunications and IT services to the Intelligence Community (IC) and 
Department of Defense (DoD). Early in fiscal year 2014, the responsibility transferred from 
MOD to the Communications Systems Directorate (COMM). For the purposes of this (b)(3) 
report, we will refer to the acquisition office when the audit addresses work performed by either 
MOD or COMM. 





























(U) Brief History of NRO Acquisition Governance and the Silver Eagle Strate 





(U/7FOWQ) In June 2010, the Director of the NRO established the Acquisition Strategy 
Panel (ASP), chaired by the Principal Deputy Director of the NRO, to review and ensure 
acquisition strategies and plans were fully coordinated across the NRO to support organizational 
goals. The Silver Eagle acquisition strategy was one of the first NRO acquisitions presented to 
the ASP. When MOL. presented Silver Eagle to the ASP in August and October 2010, (b)(3) 
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the NRO had not issued any formal instructions or guidance for the ASP.' After responding to 
several panel directed actions resulting from the August 2010 ASP, for example, the action to 
reduce the government baseline by ten percent below the budget, MO received ASP (b)(3) 
approval in October 2010 to proceed with acquiring contractor services on a commercial 
firm-fixed-price (FFP) performance-based approach to support its mission responsibilities. 
According to the ASP-approved acquisition strategy, the Silver Eagle contractor’s performance 
would be subject to performance-based’ service level agreements (SLAs) incorporated into the 
Award Fee Plan at contract award. The plan included using performance-based SLAs as an 
objective element in the subjective award fee evaluation process. SLAs describe the IT service, 
document service level’ targets, and specify responsibilities of the contractor (IT service 
provider) and the Government. 





(U/FOYQ) Since the ASP approval of Silver Eagle, the NRO has transitioned its 
acquisition governance from ASP to the Acquisition Strategy Council (ASC), overseen by the 
Director, NRO and issued policy. The ASC is one of the NRO’s key elements in its governance 
process to ensure acquisitions support NRO strategic goals, Director of National Intelligence 
(DNI) and DoD efficiency and affordability initiatives, and coordination with NRO stakeholders. 


(U//FOZOQLIn 2013, the NRO introduced enterprise portfolio management for all NRO 
service acquisitions to its governance process. For service acquisitions, the Director, NRO, 
delegates decision authority to the NRO Senior Manager or NRO Deputy Senior Manager for 
Services. This new management approach for service acquisitions focuses on applying strategic 
and enterprise planning, and defined performance metrics. The scope of Silver Eagle now falls 
under the NRO’s service acquisition governance process. 


(U) Silver Eagle Contract Details and Provisions 


(U7FOEUQ) The NRO competitively awarded Silver Eagle to General Dynamics 
Information Technology (GDIT), in July 2011, to provide enterprise IT and telecommunication 
services support to the IC and DoD. GDIT assumed full responsibility for the program from the 
Enterprise IT contract predecessor, Harris Information Technology Services, on 16 January 2012 
at the completion of an agreed to transition period that commenced on 15 August 2011. 


(U/AFOWQ) Under the Silver Eagle contract, GDIT is responsible for monitoring the 
network, providing routine maintenance, and providing first responder troubleshooting and repair 
of the NRO IT and Telecommunications.* The broad range of IT service responsibilities include, 
but are not limited to,: 

e Centralized Service Center Support 

e Network Management and Operations 





(U/FO8O).The NRO issued instructions for the Acquisition Strategy Council (ASC) in late 2011. The NRO 
governance process transitioned from the ASP to the ASC, after the ASP approved the Silver Eagle acquisition 
planning. 

* (U) According to Federal Acquisition Regulation, performance-based acquisitions emphasize results rather than 
how the contractor should perform the work. 

* (U) Service levels should represent the NRO stakeholder needs according to the Information Technology 
Infrastructure Library best practices. 

* (U) Definition for echelon one (E1) work activities. 
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Secure and Non-secure Telephony, Conferencing, and Facsimile Support 
Mission Conferencing: Support Compunetix Conferencing Equipment 
Video Services and Video Teleconferencing Support 

Compartmented Network Administration, Video and Voice 

Desktop Hardware and Application Services/Support (Unclassified, Secret, Sensitive 
Compartment Information (SCI) 

Portable Electronic Devices 

Network Connectivity 

Messaging Support 

Communications Equipment Rooms 

Secure Telephone Equipment (STE) Support 

Data Storage/Back-up 

Configuration Management 

Continuity of Operations 

Communications Security 


(UFFOEHQ) In addition, the contractor’s services include some support for engineering of 
new and upgraded services and modification of the existing baseline capabilities.” GDIT has 
primary responsibility for adjudicating all user requests pertaining to NRO Domains. These 
domains include four systems (e.g., the NRO Management Information System (NMIS)), and 
seven networks (e.g., the Government Wide Area Network (GWAN)). For this audit, we have 
defined stakeholders as any individual that requires Silver Eagle contract services. 


(U/7FOLQ) Silver Eagle is a commercial, FFP, award fee, labor hour type contract. 
As detailed in the contract line item number (CLIN) structure for the Silver Eagle contract in 
Appendix B, FFP is used to acquire standard services and labor hours for non-standard services. 
The contract consists of a three-year base period and five, one-year options. During the audit, 
COMM exercised the first one-year option period for baseline services. Before exercising the 
next contract options or re-competing the requirements, the NRO has the opportunity to address 
or negotiate changes to the contract requirements. 


(U) Firm-Fixed-Price Contracts 


(U/7FOQ) According to the Federal Acquisition Regulation (FAR), when a contractor 
accepts an FFP type scope, the contractor agrees to the maximum risk and full responsibility for 
all costs and resulting profit or loss associated with that contract and SLA scope. On an FFP 
contract, the government's payment is based on the results the contractor achieved and not the 
effort expended. Next, when the government acquires services on a commercial FFP basis, 
the government expects the contractor to correct or replace the non-conforming supplies or 
services, without additional cost to the government. Lastly, the FAR's quality assurance 
standards require the contracting officer (CO) to obtain an equitable price reduction or other 
consideration when critical or major nonconformance occurs on an FFP contract.° These 





: (U) NRO definition for echelon two (E2) work activities. 
° (U) Equitable adjustments can also be required for minor nonconformance services when the contractor will 
achieve greater savings due to the nonconformance. 
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standards for services indicate that the CO can identify up front the value of individual work 
requirements for use in determining an equitable adjustment for nonconforming FFP services. 


(U) SCOPE AND METHODOLOGY 


(U//FOHQ) The scope of this audit and report covers the NRO’s approval of the Silver 
Eagle acquisition planning and strategy as it relates to contract requirements verification and 
contract oversight. During our audit planning work, the OIG determined that the Silver Eagle 
acquisition strategy merited a closer look to help assess the contract requirements, and 
overseeing and verifying contractor performance. The OIG modified the audit scope 
accordingly. 


(U//FOXQ) The OIG performed this audit from December 2013 to March 2015 in 
accordance with Generally Accepted Government Auditing Standards issued by the Comptroller 
General of the United States. Those standards require that we plan and perform our audits to 
obtain sufficient and appropriate evidence that provides a reasonable basis for the findings and 
conclusions based on our audit objectives. The OIG assessed the internal controls deemed 
significant within the context of the audit objectives. The OIG believes that the evidence 
obtained provides a reasonable basis for the findings and conclusions based on the audit 
objective. Any information system data used by the auditors or included in this report for 
informational purposes was not audited, and is not significant to the audit findings. 


(U/FOVQLTo accomplish the audit, the OIG assessed the NRO’s implementation of the 
acquisition governance framework for Silver Eagle, and the consistency of the ASP-approved 
acquisition strategy with the contract requirements and contract implementation. The OIG 
reviewed and documented relevant laws and regulations, and NRO guidance, policies, and 
procedures pertaining to our audit objective. We also reviewed acquisition and customer 
satisfaction IT best practices. ’ 


(U/*FOUQ) The OIG evaluated whether the NRO established and implemented a plan to 
achieve the approved Silver Eagle performance objectives and contract requirements. This 
included evaluating the government oversight and acceptance of FFP requirements, contractor’s 
compliance with DoD 8570.01-M Information Assurance Workforce Improvement Program 
commercial certification requirements for individuals performing information assurance (IA) 
requirements, and assessing the potential Silver Eagle insider threat by testing and analyzing the 
NRO’s monitoring and polygraphing of privileged users consistent with the Statement of Work 
(SOW). 


(U/7FOVQ) The OIG also analyzed the acquisition office’s effectiveness in using its 
oversight mechanisms to oversee and verify Silver Eagle contract performance. 
The oversight mechanisms evaluated included the award fee determinations, the contractor’s 
service-level agreement performance and reporting; contractor’s delivery of the tool suite, and 





” (U) Kevin Forsberg, Ph.D., Hal Mooz, and Howard Cotterman, Visualizing Project Management, (John Wiley & 
Sons, Inc., 1996), p. 105 paragraph 3. Kathy Schwalbe, Information Technology Project Management, Thomson 
Course Technology, 4" Edition, 2006), p 293, paragraph 2; Alison Cartlidge, Ashley Hanna, Colin Rudd, Ivor 
Macfarlane, John Windebank, Stuart, Rance, The IT Infrastructure Library: An Introductory Overview of ITIL V3, 
(The UK Chapter of the itSMF), page 12, paragraphs 1 and 2. 
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training and reference manuals; and review and approval of Silver Eagle vouchers and invoices. 
Appendix C provides further details on the audit scope and methodology. 


(U) PRIOR COVERAGE 


(U/FOUQ) Audit of the National Reconnaissance Office Management of the Patriot 
Program (Project No. 2006-008A), dated 8 June 2007. In this audit, the OIG reported significant 
performance challenges the NRO experienced. The OIG made several recommendations to 
improve the contract, and performance oversight of the contract. Appendix D details the Patriot 
audit recommendations. 


(U) AUDIT RESULTS 


(U/7FO8Q) Overall, the OIG found that the NRO has not established the level of 
oversight and verification required to determine that the Silver Eagle contractor performance is 
meeting intended telecommunications and IT responsibilities. The NRO has yet to define the 
Silver Eagle performance objectives in terms of contract requirements and contract oversight 
processes. For this report, acquisition planning includes the ASP oversight and approval of the 
Silver Eagle acquisition plan’s performance objectives and stakeholder involvement. Contract 
oversight processes for the report consist of contractor accountability for FFP requirements, 
award fee determinations, contract performance and payment verification, and monitoring of 

rivileged user accounts. Specifically, the NRO acquisition planning and contract (b)(3) 

oversight processes did not include 


* implementing an acquisition strategy that defined and traced the performance 
objectives to contract performance and oversight requirements; 

e engaging stakeholders in defining the requirements and quality standards to include 
measuring customer satisfaction; and 

e establishing the basis for FFP payments, valid FFP baselines, or methodology for 
verifying FFP receipt of goods and services. 


(U/7AFOEVQ) Consequently, the NRO may fall short in achieving the ASP-approved 
contract objectives to improve performance, customer service, and control costs; to incorporate 
“cutting edge” IT and telecommunications technologies; and to adjust resources due to 
efficiencies and changing requirements. 


(U//FOUQ) The OIG also found that some improvement opportunities exist that 








could benefit the NRO when acquiring services on a commercial FFP basis and when using 
Therefore, the OIG has addressed our assessment and suggestions for (b)(3) 








acquiring services on a commercial FFP basis in the final section of the report under Other Audit 
Matters, and issued a Letter of Concern to the Office of Security and Counterintelligence 
(OS&CID regarding the use (b)(3) 
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(U/FOPQL The NRO Silver Eagle Acquisition Strategy lacked key elements. 


(U/7FOVQ) In approving the Silver Eagle acquisition plan, the NRO ASP did not ensure 
that the acquisition directorate had defined baseline requirements and an oversight approach to 
determine, measure, and report progress compared to the approved Silver Eagle performance 
objectives. The Silver Eagle acquisition objectives included 


® improving performance and customer service; 
controlling costs;* 
incorporating cutting edge information technology and telecommunications 
technologies; and 

e adjusting resources due to efficiencies and changing requirements. 


(U/FFOYQ) In addition, the NRO ASP did not confirm that the acquisition organization 
had obtained stakeholder input to determine Silver Eagle contract requirements and quality 
standards. Such input would provide management a baseline to measure improvements to the 
contractor’s customer service. Without engaging the stakeholders, the NRO is challenged in 
validating improvements in customer service. 


(U//FOBQ) The NRO lacked assurances that the Silver Eagle strategic guidance was 
followed. Within the NRO’s acquisition governance framework, the ASP is responsible for 


assessing the acquisition strategy and providing strategic guidance to the acquisition directorate. 
Yet, the NRO applied no provisions to verify whether the acquisition directorate implemented 
and followed ASP strategic guidance for the Silver Eagle acquisition. The NRO’s Silver Eagle 
acquisition strategy brief to the ASP and other acquisition documentation reviewed as part of this 
audit did not define nor trace measurable requirements to the performance objectives. 


(U/TFOUQ) For example, for the performance objective “improve performance,” the 
acquisition documentation does not define the existing baseline for what Silver Eagle 
performance the NRO plans to improve; does not provide an objective goal that establishes when 
the NRO will know performance has improved; nor does it state how the acquisition directorate 
will measure and report progress toward improving performance. 


(U/FFOUQ) Given the worldwide scope and the | __sjnvestment the NRO has (b)(3) 
made in the Silver Eagle acquisition, the NRO needs to determine the contract’s achievements 
toward the approved performance objectives. In addition, the NRO needs to recognize when 
corrective actions or performance improvements are warranted. Hence, the NRO would benefit 
from a reassessment of the Silver Eagle under the current services policy to ensure that the 
current contract requirements align with the approved performance objectives. 





* (U//F@CQ)Y Our assessment primarily focused on the first two objective areas to improve performance and 
customer service and allow the government to control costs. However, the finding applies to all of the performance 
objectives. 
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(U) Recommendation #1 for the Director, COMM: 


(U/FOLQ) Consistent with the tenants of the NRO’s Services Acquisition policy, 
assess the Silver Eagle contract to ensure that the current contract requirements 
align with the performance objectives as intended. Document the benefits and 
challenges of revising the current contract requirements. At a minimum, future 
services acquisitions should 


e define each approved objective in measurable terms; 

e define the current baseline performance level and performance goals; 

e trace the approved performance objectives to the contract requirements 
(e.g. award fee criteria and service level agreements); and 

e detail the provisions for measuring and reporting progress consistent with the 
approved performance objectives. 








(U/AFOLQO) Management Response: Director, COMM concurred with the 
recommendation. Since the Silver Eagle contract is in its fifth year and will be transitioning 
to future services acquisitions, COMM will consider this recommendation and ensure the 
objectives as outlined above are addressed by the future contracts. Estimated completion date is 
30 November 2015. 


(U7FOLQ) The NRO excluded IT and telecommunications stakeholders in the 
Silver Eagle acquisition planning. The OIG found that the Silver Eagle acquisition strategy did 


not include stakeholder input as part of the acquisition planning process. According to the Silver 
Eagle acquisition officials, they did not ask stakeholders to identify their needs for the IT and 
telecommunications services baseline requirements. Instead, the acquisition office conducted an 
internal review and validation of the existing NRO baseline requirements based on the 
predecessor contract, Patriot. However, the Patriot contract also excluded stakeholder input from 
the acquisition planning and implementation processes.’ According to acquisition and customer 
satisfaction IT best practices, acquisition officials should involve stakeholders in developing 
requirements and quality standards to ensure that their needs are satisfied. The COMM Deputy 
Director indicated the DNRO deferred to the acquisition directorate to determine requirements 
on behalf of the Silver Eagle customers. The program office response indicated that NRO 
stakeholders were indirectly involved. However, the acquisition office could not 

provide information supporting an evaluation of stakeholder needs when formulating the Silver 
Eagle baseline and quality assurance SLAs. Without stakeholder input in determining the NRO 
IT and telecommunications service standards, the NRO is limited in its ability to assess the Silver 
Eagle performance in meeting objectives to improve stakeholder satisfaction. The NRO would 
benefit from input from the Silver Eagle stakeholders tn identifying IT requirements and 
priorities, and setting the customer satisfaction baseline for upcoming contract options or future 
replacement contracts. 





° (U) Final Audit Report: NRO Management of the Patriot Program, dated 8 June 2007. 
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(U) Recommendation #2 for the Director, COMM: 


(U//FOLQ) Consistent with the NRO’s Service Acquisition policy and procedures, 
solicit, assess, and incorporate stakeholder requirements and priorities into the 
Silver Eagle baseline or replacement contract. 





(U//FOPQ) Management Response: Director, COMM concurred with the 
recommendation and requested closure. In preparing for the future services acquisitions— 
Transformers framework—, COMM briefed several customer engagement forums, the Ds and Os, 
and the Acquisition Strategy Council. COMM will continue customer engagement through the 
future services contract award. 


(UTFOUQ) OIG Response: OIG will keep recommendation #2 open pending receipt of 
documentation from COMM demonstrating the collection and incorporation of stakeholders’ 
requirements and priorities into the Transformers framework. Based on our discussions, by 
13 October 2015, COMM will provide an updated remediation plan that details the actions 
planned and an estimated completion date. 


(U//FELQ) COMM is not monitoring stakeholder satisfaction with Silver Eagle 
performance and costs. The OIG found that Silver Eagle has made little progress in 


implementing a customer satisfaction metric that considers stakeholder concerns with contractor 
performance. In the prior audit of the Silver Eagle predecessor contract, Patriot, the OIG 
reported on similar conditions. Specifically, although the customer satisfaction SLA measures 
the resolution of an IT or telecommunication problem, the metric does not consider the 
customer’s feedback on the cause of the problem or the time taken to resolve the problem. 
Acquisition and customer satisfaction IT best practices dictate that the customer establishes the 
level of service requirements, priorities, and quality standards. During our assessment, 
stakeholders expressed their ongoing concerns with COMM’s failure to deal with Silver Eagle 
contract performance and cost issues. The NRO stakeholders also reported that the Silver Eagle 
contract requirements and quality standards did not represent their priorities. The stakeholders’ 
concerns included 


e the number and duration of outages that creates an inability to perform priority tasks 
or results in work stoppages; 

e the lack of technician responsiveness or time required to address service 
tickets/questions; 

e the premature closing of service tickets and an unwillingness to reopen the same 
ticket in lieu of issuing a new one; 

e the cost for items that stakeholders consider standard baseline requirements such as 
dual monitors; and 

e the payment for annual O&M costs for non-baseline commercial items that would be 
replaced vice repaired such as monitors or additional printers. 


(U/7FOWQ) The stakeholder concerns demonstrate a need for COMM to assess the Silver 
Eagle contractor in meeting the approved performance objective to improve customer service. 
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Better inclusion of stakeholder feedback on the Silver Eagle contract performance and costs 
would assist in evaluating contactor performance and customer satisfaction. 





(U//) Recommendation #3 for the Director, COMM: 


(U//FOOQ) Modify the Silver Eagle customer satisfaction SLA metric to consider 
NRO stakeholder input on the quality of service received under the Silver Eagle 
contract. 








(U/7FOLQ) Management Response: Director, COMM concurred with the 
recommendation and requested closure. COMM described Silver Eagle contractor assessment 

















activities to measure customer satisfaction and COMM’s Annual (b)(3) 
Survey. In addition, COMM discussed its recently completed Ds and Os Front Office Refresh 
Project that resulted in refreshing approximately workstations. (b)(3) 











(U/7FOLQ)OIG Response: OIG will keep recommendation #3 open pending receipt of 
revisions to the current customer satisfaction SLA metrics, documentation of Silver Eagle 
stakeholders’ concurrence that the current customer satisfaction SLA metrics adequately measure 
their satisfaction with the service, or demonstration that the future Transformer acquisition will 
incorporate customer input on the appropriate customer satisfaction metrics. Based on our 
discussions, by 13 October 2015, COMM will provide an updated remediation plan that details 
the actions planned and estimated completion date. 


(U/FOLQ) COMM needs to improve oversight of contract performance and contractor 
accountability. 


(U/7FOUQ) The OIG found that COMM should improve the oversight and accountability 
of the Silver Eagle contractor performance. Specifically, the acquisition office has rewarded the 
contractor simply based on its effort rather than for achieving or exceeding the contract 
requirements, Further, COMM has made contract payments without a valid baseline, payment 
schedule, or verification of basis of contract costs claimed. As a result, the NRO lacks the 
assurance that it has received services commensurate with payments made, and held the 
contractor accountable for FFP performance. The NRO improvement in these oversight areas 
should result in greater contractor accountability and incentivizing the contractor to meet or 
exceed requirements. The following subsections detail opportunities for improving the Silver 
Eagle oversight. 


(U/7FOGQ) COMM needs to hold the contractor accountable for FFP requirements. 
The OIG found that COMM had not ensured proper performance of the Silver Eagle 


requirements and had not taken action with the contractor to remedy the shortfalls. According to 
the FAR, when the government acquires services on an FFP basis, the government expects the 
contractor to correct its non-performance, without additional cost to the government. COMM 
took no action to obtain a price adjustment for the contractor’s failure to deliver some SLA 
assessments for ten months. For example, the contractor did not deliver the monthly FFP SLA 
requirements originally contracted for a 24-hour by seven days per week availability of “server 
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and network devices” that was later modified to enterprise system maintenance and monitoring 
availability. Without the SLA reporting, COMM cannot determine whether the contactor has 
delivered the required level of service. The ASP approved the use of FFP performance-based 
SLAs to acquire Silver Eagle commercial IT services, but the acquisition office did not include 
in the contract a remedy for non-performance of this SLA or any other FFP requirement. 
Regardless of whether the contract includes a defined means to hold the contractor accountable 
for FFP requirements, the CO has an obligation to seek remedy for FFP requirements not 
received. However, the OIG could not verify that COMM held the contractor accountable for 
the ten-month performance shortfall to include through an equitable adjustment or in award fee 
determinations. '° 


(U//FOUQ) In another example, COMM had not held the Silver Eagle contractor 
accountable for its employees meeting commercial certification requirements under DoD 
8570.01-M, Information Assurance Workforce Improvement Program. Although the Silver 
Eagle SOW requires contract employees to meet certification requirements within six months of 
performing information assurance functions, COMM did not ensure the contractor delivered on 
this FFP requirement, nor did it seek a remedy from the contractor for non-compliance with the 
requirement. Based on the COMM data on the total number of contractor employees performing 
information assurance (IA) functions, the OIG assessed that the NRO may have overpaid the 

















contractor. Nearly contract employees performing IA functions did not (b)(3) 
comply with the certification requirement within six months of assuming IA functions as 
required by the SOW. Further, contract employees did not meet the certification 











requirement for at least two years, and at least one additional person performed IA functions for 
three years without the certification. Therefore, the NRO has paid the contractor for services that 
are non-compliant with the SOW. 


(UFFEUQ) In addition, the OIG noted that the Silver Eagle CO has incorporated the new 
mandatory NRO Acquisition Manual (NAM) clause containing the certification requirement into 
the contract. The more stringent certification requires all contractor personnel performing IA 
functions under an NRO contract to have the proper and current IA certifications immediately 
(instead of the six-month grace period) in accordance with NRO Directive 50-5, Information 
Assurance Workforce Enhancement Program, and DoD 8570.01-M. However, COMM has not 
incorporated the DoD 8570.01-M requirements into the Silver Eagle SOW. Without clear and 
consistent certification requirements between the SOW and contract, the contractor could claim 
they still have a six-month grace period to fulfill the IA certification requirements when they 
bring on replacement personnel or to meet new requirements. 


(UAFOUQ) COMM is responsible for ensuring the Silver Eagle contractor’s proper 
performance of FFP requirements. Improved, rigorous contract oversight would ensure the NRO 
receives the required services or an equitable adjustment. 





m (U//FO4IQ) The lack of reporting could stem back to contract award, which was outside the scope of the testing 
period. 


10 
UNCLASSIFIED/FOR-OFFICIAL USE ONLY 
Approved for Release: 2017/01/13 C05095470 


A d for Rel : 2017/01/13 C05095470. 
UNC Lor te eisbo INLY 





(U) Recommendation #4 for the Director, COMM in coordination with 
Director, Office of Contracts: 


A. (U/7FORQ) Develop and implement oversight activities that ensure 
accountability for FFP and performance-based requirements. 

B. (U/7FO¥Q) Assess whether an equitable adjustment is required for the Silver 
Eagle contractor’s performance shortfall for FFP and performance-based 
requirements. 








(U//FO8Q) Management Response: Director, COMM concurred with the 
recommendation. COMM will reassess its oversight activities to ensure accountability for FFP 
and performance requirements. Should deficiencies be found, COMM would submit revisions or 
changes to the FDO and contracting officer for consideration. Estimated completion date is 
31 July 2016. 





(U) Recommendation #5 for the Director, COMM in coordination with 
Director, Office of Contracts: 


(U/AFOUQ) Revise the Silver Eagle SOW to require all contractor personnel 
performing IA functions to have the proper and current IA certifications in 
accordance with ND 50-5 and DoD 8570.1-M. 








(U7FOLQ) Management Response: Director, COMM concurred with the 
recommendation and requested closure. COMM modified the Silver Eagle SOW to ensure 
ND 50-5 and DoD 8570.1-M requirements are consistent across the entire contract. The 
government and contractor have agreed to the SOW changes. 


(U/*FOUQ) OIG Response: The OIG has considered COMM’s response and closed this 
recommendation. 


(UAFOUQ) FDO award fee decisions reward Silver Eagle contractor efforts instead 
of achieving or exceeding contract requirements. The OIG found that Fee Determination 
Officials (FDOs) have consistently determined the contractor's overall performance above 
satisfactory, despite the contractor’s failure to meet specific contract requirements in the areas of 
property management, contractor personnel resources and skills, SLAs, and technical 
deliverables. The Silver Eagle Award Fee Plan indicates the award fee'' is to provide the 
contractor a monetary incentive to perform better than satisfactory to obtain additional profit 
beyond the profit already included in the contractor prices. 


(U/FOUQ) The OIG reviewed three six-month award fee periods beginning 
1 October 2012 and ending 31 March 2014.'? The OIG found that the FDO and the acquisition 
office did not adhere to the Silver Eagle Award Fee Plan. For example, in award fee period four, 





'' (U) Appendix E details the contract award fee available and earned through 30 September 2014. 
'* (U) Covers award fee periods three through five. 
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the FDO and acquisition office did not establish support for a "satisfactory”’* rating in the 

property management area, which was assessed up from an “unsatisfactory” rating in award fee 

period three. The briefing slide'* for property management includes deficiencies, no strengths, 

and states, “A large amount of effort, communication, and updated Silver Eagle process are 

needed to remedy several issues across the enterprise.” Deficiencies include concerns with the 

contractor’s property management of COMM bench stock and sparing level that (b)(3) 
contributed to an accumulation of excess equipment; the contractor’s need for accurate 

and current property records; and the contractor’s lack of adherence to current approved property 

management processes. Furthermore, the FDO and acquisition office did not support how they 

offset the property management deficiencies to warrant the recommended satisfactory rating. 





(U//FOEWQ) For the next award fee period (period five), the FDO determined the 
contractor’s performance in the area of property management was “unsatisfactory,” and noted 
numerous performance deficiencies. Period five was the third consecutive award period in 
which the FDO specified property management as an area for improvement and continued 
concern. Consequently, the contractor’s failure to meet property management requirements 
challenges the NRO’s ability to account for IT and telecommunications assets. 


(U/7FOEZQ) In addition to property management, the FDO also departed from the Award 
Fee Plan by rewarding the contractor for effort undertaken instead of achievement or exceeding 
contract requirements in personnel,'° SLA performance, and technical deliverables. For the three 
consecutive periods assessed, the FDO rated the contractor’s performance for personnel as 
satisfactory even though the contractor did not meet all personnel skill and certification 
requirements. For SLA performance, the FDO was rating the contractor’s performance as 
excellent or good in meeting the requirements, which is not consistent with the FDO statements 
that the contractor’s status reports for SLAs contain incorrect information. Similarly, the award 
fee assessment for the technical deliverable has regularly identified quality concerns with the 
SLA information and that the contractor lacks a verifiable and accurate process for the metrics. 


'° (U/TPRERQ) As defined, by the NRO in the Silver Eagle Award Fee Plan and award fee determination briefings, a 
satisfactory performance rating signifies that "deficiencies exist but are offset by areas of exceptional performance." 
'* (UPPOLIQ) Award Fee Period 4, Evaluation: Management Performance, Sub-factor 7: Property management 
states, "Silver Eagle placed emphasis on this key focus area, working with the Government to jointly identify issues 
and mitigation strategies. Progress was made, albeit slow as this is a complex environment.” 
'S (UTPOUQ) The award fee Personnel subfactor for 

e Period 3 indicates, although staffing level has shown recent improvement, specific areas and instances of poor 
performance in this category remains, including the inability to meet all shift manning requirement and 
personnel qualifications. 
Period 4 indicates, manning for the overall program remains good, yet the contractor continues to have an 
inability to meet minimum shift manning requirements, personnel qualifications, training, and certification 
requirements. 
Period 5 states, “manning showed improvement over the course of the award fee period resulting ina 
satisfactory rating.... Government expects continued improvement and 100% manning .... moving forward.” 
The brief also states, after months of hard work, the contractor finally achieved 8570.01-M compliance. 


12 
UNCLASSIFIED7/FOR GFRICHLESE ONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470. 
UNCLADSS LE LE. De O Y 


Rewarding the contractor’s performance effort rather than incentivizing the contractor to meet or 
exceed requirements has occurred because the FDOs had not 


e followed the NAM that states that award fees for service contracts shall start at zero 
percent and increase in value as the contractor meets or exceeds performance 
expectations when accomplishing contract requirements; 

e complied with the NAM that states, "unsatisfactory contractor performance must not 
be rewarded through award fee earnings;” and 

e followed their Award Fee Plan that states the award fee will 

© incentivize the contractor to improve contract performance and exceed contract 
objectives, 

© provide the contractor a monetary incentive to perform better than satisfactory 
to obtain additional profit beyond the contractors’ already fully burdened labor 
rates that include profit. 











(U77FOLIQ) To date, the NRO has awarded the Silver Eagle contractor nearly (b)(3) 
percent of the available award fee. '° This fee is in addition to profit the NRO already paid 
as part of the contract structure without achieving the approved performance objectives. By not 
holding the contractor accountable for meeting or exceeding requirements through the award fee 
process, the NRO is sending an incorrect message on contractor performance. The NRO is 
paying for and rewarding the contractor with additional profit for substandard performance rather 
than seeking to motivate the contractor to improve performance. 





(U/FOUQ) COMM has the responsibility to ensure that it obtains the greatest value for 
its fund expenditures in supporting the NRO’s IT and telecommunications mission 
responsibilities. Therefore, COMM needs to follow its acquisition strategy and award fee plan of 
motivating and rewarding the contractor for meeting or exceeding contract performance and 
must discontinue rewarding the contractor based on effort. 





(U) Recommendation #6 for the Director, COMM in coordination with 
Director, Office of Contracts: 


(UFFQUQO) Ensure that the Silver Eagle award fee determinations are consistent 
with the NAM and Award Fee Plan. 








(U//FORQ) Management Response: Director, COMM concurred with the 
recommendation and requested closure. COMM has stabilized the FDO position and award fee 
monitoring to be consistent with the NAM and Award Fee Plan. 


(U/7FOLQ)OIG Response: The OIG has considered COMM’s response and assessed a 
subsequent award fee determination document. The OIG acknowledges COMM’s explanation of 
the award fee procedures, the complexity in determining contractor accountability under the 
Silver Eagle contract, and COMM’s actions to achieve uniformity to enhance the contractor’s 

















'° (U/FOUQ) The total award fee pool available for the life of the contract including options is roughly 
As of period five, the NRO determined the contractor earned approximately pf the available allocation (b)(3) 
of over 
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performance across the 19 award fee subfactors. For future services acquisitions, COMM would 
benefit from an acquisition strategy and award fee plan that provides the government the 
flexibility to modify the emphasis of critical performance areas for motivating and rewarding the 
contractor for meeting or exceeding requirements. The OIG has closed this recommendation. 






(U Payments made without a basis for payment. The OIG found that the 
NRO has paid o the contractor for FFP services without establishing a commercial- 
based delivery payment plan in the contract and without defining a methodology to verify receipt 
of services for five CLINs. Payments include the service center, a tool suite, enterprise 
operations support, government site standard services, and program management. For some of 
these FFP CLINs, COMM is paying for services without a valid baseline to measure 
achievement that would necessitate payment. According to the FAR, FFP contract payments are 
based on results achieved and not effort expended. Without a valid requirement baseline to 
establish a FFP and criteria for payment of FFP CLINs, the NRO has no assurance it is receiving 
supplies or services valued commensurate with the invoiced amounts or payments made. 





(U//FOUQ) When the OIG sought to establish the basis for payment for two FFP CLINs, 
the CO and the contracting officer’s technical representative (COTR) stated that COMM did not 
have a validated baseline to support the Service Center or the Government Site Standard Services 
CLINs. According to the contract, the Service Center CLIN supports over user accounts 
for a total price of approximatel The Government Site Standard Services CLINs 
supports more than }quipment for the base period plus one option period at a 
total price over The contract states, “baseline measurement will occur annually 
on the first business day of March...Any +/-3% change to the baseline quantity will initiate a 
discussion for potential price renegotiation of the CLIN 0001.” However, the baseline has not 
changed since contract award. These acquisition officials performed an informal assessment for 
the Service Center CLIN baseline in April 2014, and found a discrepancy in the number of active 
and inactive user accounts. The actual number was approximately rather than the over 
























































user accounts on which the total fixed price is based. According to the current CO, the 








NRO approved and paid the invoices because the invoices were consistent with an FFP payment 
schedule that the contractor e-mailed to the CO, which is not part of the Silver Eagle contract. 
Hence, the NRO is paying for services under these two CLINs although a valid baseline and 
basis or methodology for verifying acceptance of services has not been established. 


(UFFOUQ) The OIG also found that the NRO has not specified a baseline measure of 
numbers of users or pieces of equipment to support a payment plan for two other FFP CLINs. 
The NRO has not established a payment plan for the Enterprise Operations Support CLIN with 
an FFP of approximately with a quantity of two for an unspecified description, and 
the Program Management CLIN that has an FFP of over for a quantity of one for an 
unspecified description. The CO and COTR stated that their basis for paying these CLINs was 
the monthly Business Management Reviews and Program Management Reviews, award fee 
input for the contractor, weekly meetings with the contractor, and an updated payment schedule 
provided by the contractor via e-mail that has no basis in the contract. By approving invoices 




















'7 (U) The CO and COTR have also stated that they are working toward capturing the required data for the CLIN 
0001 and 0003 baselines. 
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without a baseline or basis for payment, the NRO is paying for services without verification they 
were received. 


(U/ARQLIO) Further, the OIG found that the NRO made premature interim payments for 
the delivery of a service-enhancing, commercial off-the-shelf FFP tool suite, valued at (b)(3) 























without specifying the payment financing terms and before accepting full operational 





capability (FOC) of the suite and certification and accreditation of the system. According to 
FAR 32.202-1 Policy (a), the contractor is responsible for providing all resources needed for 
contract performance and financing. The FAR also states that if the market research indicates a 
common practice or the need for commercial financing, such as interim payments, the CO 
should specify payment terms provided in the Request for Proposal (RFP), Instructions to 
Offerors, and in the contract. If payment terms are not stated in the RFP, the CO is required to 
include FAR 52.232-31, Invitation to Propose Financing Terms, in the RFP, and the contract 
should include FAR 52.232-29, Terms for Financing of Purchases of Commercial Items. 
Notwithstanding including FAR 52.232-29 into the contract, the clause lacks specific detail on 
payment terms. The acquisition office did not provide any information warranting interim 
payments, whether the IT service market requires buyer financing as a commercial practice, or 
how such financing occurs in the commercial market place. According to the CO, the NRO has 
not provided commercial financing. Instead, the CO stated that the tool suite payments were 
based on of the annual contract value for the (b)(3) 
CLIN. Still, the contract does not specify those terms, and the Silver Eagle contractor’s 
vouchers did not include supporting data to indicate the basis of the interim payments. 
Furthermore, full payment for the tool suite occurred nearly a year before FOC, which conflicts 
with the contract documentation that indicates acceptance of the tool suite is FOC. Additionally, 
COMM continues to identify quality shortfalls with the SLA information obtained from the tool 
suite delivery, and cites the contractor's lack of a verifiable and accurate process for determining 
and reporting performance metrics. Without a valid baseline and a valid and verifiable basis of 
payment, the NRO does not have the assurance that it has properly paid for Silver Eagle services 
and tools. In addition, the OIG found other examples of areas for internal control improvements 
to the contract baseline and payment process oversight. 














(U/FOLQ) Need for a Valid FFP Baseline. The OIG found recurring transfers of 











different fixed-price (FP) CLINs indicating COMM lacks clarity (b)(3) 





of stakeholder requirements and a valid FP baseline. So far, COMM has modified the contract 
four times to transfer funding and scope from a FP labor hour Tail Site and Other Operating 
Location Support CLIN to a FFP Government Site Standard Services CLIN. According to the 
acquisition documentation, the first change clarified the charging methodology between the two 
CLINs, addressing an imbalance between the actual contractor work and funding, and the 

other changes realigned labor hours based on projections or actuals. The government accepted 
the contractor's proposed pricing and labor hour reductions for these transfers. However, the CO 
did not document the price analysis to demonstrate the government obtained the labor required 
before transferring funds to a FFP CLIN. Additionally, there was no assurance that the transfers 
did not provide the contractor increased profit. Furthermore, when the CO exercised the first 
two options, the CO's written determination states “exercising the option is the most 
advantageous method to fulfill the need, price, and other factors considered based on comparing 
the competitively selected prices with GSA labor rates.”” However, the determination does not 
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provide any details on the pricing comparison, nor address the prior funding transfers, the 
reduction in labor hour requirements, or expected changes to the two CLINs. In June 2014, the 
CO exercised the latest option without the FAR-required written determination that the option’s 
requirement fulfills an existing Government need and the rationale for the option is the most 
advantageous method to fulfill the government's need, price, and other factors. Without 
establishing a valid FFP baseline, the NRO will likely continue to be required to make 
administrative adjustments to these CLINs and risks overpaying for Silver Eagle services. 


(U/7FFOLQ) More frequent contractor billing increases NRO and contractor 
administrative costs. The OIG found that COMM is making payments on the Silver Eagle 


contract as frequently as every nine to ten calendar days. The Silver Eagle contract 

contains FAR contract clause 52.232-29, Terms for Financing of Purchases of Commercial 
Items, which limits the NRO to making financing payments once per month. Still, the CO 

and contract modification state that the CO authorized the contractor to bill twice monthly to 
increase funding execution for services. The OIG review of the Silver Eagle contractor billing 
and COMM payment of invoices showed that the NRO was paying up to three times per month. 
The emphasis on execution of funds rather than paying for validated requirements results in 
increased contractor and NRO administrative costs without any tangible benefit. 


(U) Recommendation #7 for the Director, COMM in coordination with 
Director, Office of Contracts: 


A. (U/7FO8Q) At a minimum, validate the requirement baselines, contract pricing, 
and payment terms detailed in the findings above for CLINs 0001, 0002, 0003, 
0005, and 0007. Payment terms should detail the basis for payment and the method 
of verification the CO will use for payment. 

B. (U/*FOHQ) Assess whether an equitable adjustment is warranted for the Silver 
Eagle contractor’s inability to deliver the full scope on CLINs 0001, 0002, 0003, 
0005, 0007, and 0010. 











(U/7FOCQ)Management Response: Director, COMM concurred with the 
recommendation. COMM is working on a new Data Item Description that will provide 
additional detail on a portion of CLINs 0001 and 0003. COMM will validate other CLINs of 
concern. COMM will provide additional detail concerning the monitoring controls to determine 
whether equitable adjustment can be made. Estimated completion date is 31 October 2015. 


(UFFELQ) COMM could not explain fluctuations in PED services pricing. The 
OIG found that Silver Eagle contractor vouchers for domestic portable electronic devices (PEDs) 


did not explain fluctuations in the monthly services prices. Depending on the device, the 
































monthly price escalated in the contract’s second year from approximately to a high of (b)(4) 
In the third year, the price of most service devices decreased between ind (b)(4) 
per unit. For the next four years, the price per unit escalated gradually, and then (b)(4) 











dropped below the first year’s price per unit in the last two periods of performance. In exercising 
the option for the second year of PED services, the CO's written determination and finding, and 
memorandum for the record do not provide any detail pricing comparison information or 
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rationale for the significant price increases in year two. Although requested, COMM did not 
provide cost or price analysis that supports the fluctuation in the pricing. 





(U) Recommendation #8 for the Director, COMM in coordination with 
Director, Office of Contracts: 


A. (U/7FOUQ) Assess and document the price reasonableness for CLIN 0006 PED 
service pricing for year two. 

B. (U/*FOUQ) Assess whether an equitable adjustment is warranted for CLIN 
0006 PED service pricing for year two. 











(U/TFOBQ) Management Response: Director, COMM concurred with the 
recommendation. COMM will reassess PED services pricing for year two and provide the 
information required. Estimated completion data is 31 October 2015. 


(U//FOLQ)_OIG Response: The OIG reviewed COMM’s assessment of the PED 
services pricing for year two that COMM submitted following the management response. 
COMM’s assessment states that the equipment replenishment supports the price increase for year 
two. The OIG has closed this recommendation. 





(U) Recommendation #9 for the Director, COMM in coordination with 
Director, Office of Contracts: 


(U//FOLOQ) Assess ODC vouchers, including vouchers 11031, 11032, and 11034, 
and supporting information to determine and document whether an overpayment 
exists and the merit of obtaining reimbursement. 








(U/7FOBQ) Management Response: Director, COMM concurred with the 
recommendation and requested closure. COMM conducted a reassessment of invoices 11031, 
11032, and 11034, and determined that the invoices are free of error, each claim is allowable, 
and no overpayment was made. 


(U/7FOQ) OIG Response: The OIG considered the additional invoice support 
provided by COMM, and determined that COMM has resolved the questioned costs, and the 
current process is sufficient to address the risk of improper payments. Continued monitoring by 
the COTR and CO is critical to ensure accurate voucher review and payments. The OIG has 
closed this recommendation. 








= (b)(3) 
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(U) OTHER AUDIT MATTERS 
(U7FELQ) Improving NRO’s Acquisition of Commercial Services. 


(U/FFOUQ) The OIG assessment of Silver Eagle and other NRO commercial contracting 
activities'* noted that the NRO acquisition workforce has experienced challenges with having an 
understanding of what service or product they are acquiring that is available in the commercial 
market place, and how the commercial market place would acquire, contract, and pay for similar 
commercial requirements on a FFP basis. Considering the FAR states the government prefers to 
acquire services on a commercial basis, the NRO would benefit from increased emphasis in 
educating the acquisition workforce on commercial acquisitions best practices. Training should 
highlight best practices to include surveying the market place to establish procedures for 
verifying and paying for commercial services and supplies. 





'S (UPFOWQ) Transformers Project Number 2012-009 J, Report dated 11 February 2014 and IT services Project 
Number 2012-001 A Report dated 30 September 2013 
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(U) APPENDIX A: SUMMARY OF AUDIT RECOMMENDATIONS 
(U) Recommendation #1 for the Director, COMM: 


(U/FOUQ) Consistent with the tenants of the NRO’s Services Acquisition policy, assess the 
Silver Eagle contract to ensure that the current contract requirements align with the 
performance objectives as intended. Document the benefits and challenges of revising the 
current contract requirements. At a minimum, future services acquisitions should 


define each approved objective in measurable terms; 
define the current baseline performance level and performance goals; 

e trace the approved performance objectives to the contract requirements (e.g. award fee 
criteria and service level agreements); and 

e detail the provisions for measuring and reporting progress consistent with the approved 
performance objectives. 


(U) Recommendation #2 for the Director, COMM: 


(U7FOPQ) Consistent with the NRO’s Service Acquisition policy and procedures, solicit, 
assess, and incorporate stakeholder requirements and priorities into the Silver Eagle baseline or 
replacement contract. 


(U) Recommendation #3 for the Director, COMM: 


(U77FOUQ) Modify the Silver Eagle customer satisfaction SLA metric to consider NRO 
stakeholder input on the quality of service received under the Silver Eagle contract. 


(U) Recommendation #4 for the Director, COMM in coordination with the Director, 
Office of Contracts: 


A. (U7FO8QLDevelop and implement oversight activities that ensure accountability for FFP 
and performance-based requirements. 

B. (U/7FO8Q) Assess whether an equitable adjustment is required for the Silver Eagle 
contractor’s performance shortfall for FFP and performance-based requirements. 


(U) Recommendation #5 for the Director, COMM in coordination with the Director, 
Office of Contracts: 


(UAFOEUQ) Revise the Silver Eagle SOW to require all contractor personnel performing [A 
functions to have the proper and current IA certifications in accordance with ND 50-5 and 
DoD 8570.1-M. 
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(U) Recommendation #6 for the Director, COMM in coordination with Director, Office of 
Contracts: 


(U/7FOVQLEnsure that the Silver Eagle award fee determinations are consistent with the NAM 
and Award Fee Plan. 


(U) Recommendation #7 for the Director, COMM in coordination with the Director, 
Office of Contracts: 


A. (U/FOUQ) At a minimum, validate the requirement baselines, contract pricing, and 
payment terms for CLINs 0001, 0002, 0003, 0005, and 0007. Payment terms should detail the 
basis for payment and the method of verification the CO will use for payment. 

B. (U//FO¢O)Assess whether an equitable adjustment is warranted for the Silver Eagle 
contractor’s inability to deliver the full scope on CLINs 0001, 0002, 0003, 0005, 0007, and 
0010. 


(U) Recommendation #8 for the Director, COMM in coordination with the Director, 
Office of Contracts: 


A. (U//FOEUQ) Assess and document the price reasonableness for CLIN 0006 PED service 
pricing for year two. 

B. (U/7FOBQ) Assess whether an equitable adjustment is warranted for CLIN 0006 PED 
service pricing for year two. 


(U) Recommendation #9 for the Director, COMM in coordination with the Director, 
Office of Contracts: 


(U//FOLIQ) Assess ODC vouchers, including vouchers 11031, 11032, and 11034 and 
supporting information to determine and document whether an overpayment exists and the 
merit of obtaining reimbursement. 


(U) Recommendation #10 for the Director, COMM in coordination with the Director, 
OS&CI: 








Se (b)(3) 
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(U) APPENDIX B: CONTRACT VALUE AND PRICED OPTIONS 


(U//FOUQ) Silver Eagle is a commercial, firm-fixed-price (FFP), award fee, Fixed-Price 
Labor Hour (LH) type contract. For Silver Eagle, FFP is used to acquire standard services and 
labor hour for non-standard services. Table | details the current contract line item numbers 
(CLIN), their description, contract type, and value, excluding options not yet exercised. 


Table 1: (U) Contract Line Item Number Structure 







































































CLIN | DESCRIPTION TYPE VALUE | CLIN | DESCRIPTION TYPE | VALUE | 

0001 | Service Center FFP 0008 | Incoming Transition LH 

0002 FFP 0009 | Outgoing Transition LH (b)(3) 

0003 | Government Site FFP 0010 | Service Enhancing Tool Suite | FFP 
Standard Services Integration 

0004 | Government Site Non- | Labor 0011 | Other Direct Costs (ODCs) CR 
Standard Services hour 

(LH) 

0005 | Tail Site and Other LH 0012 | Award Fee FFP (b)(3) 
Operating Location (b)(4) 
Support 

0006 | Portable Electronic FFP 0013 | Patriot Enterprise LH 
Devices (PEDs) Management System 
Support Operations & Maintenance (b)(3) 

(PEMS O&M) 
0007 | Program Management FFP 0014 | Portable Electronic Devices Cost 
(PED) Support International 
Subtotal Total 


















































This table is Unclassified 


(U//FOUQ) Table 2 details the total price of the options by CLIN. 






Table 2: (U) Total Available Price Options on the Silver Eag 



















































0001 Incoming Transition JL 
0002 Baas Transition oo (b)(3) 
0003 FFP Service Enhancing Tool Suite 
Integration 
0004 |Government Site Non- LH Other Direct Costs (ODCs) CR 
Standard Services (b)(3) 
0005 [Tail Site and Other Award Fee (b)(4) 
Operating Location Seaal 
0006 [Portable Electronic Devices [FFP Patriot Enterprise Management 
System Operations & (b)(3) 
Maintenance (PEMS O&M) 
0007 [Program Management FFP Portable Electronic Devices Cost 
(PED) Support M- International 
| _[Subtotal otal ___. ~~ -|]_-+—/] 











This table is unclassified 


23 
UNCLASSIFIED FOR GFHGCHELUSE ONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470. 
UNCLASS EF LD / ee ee VY 


THIS PAGE INTENTIONALLY LEFT BLANK 


24 
UNCLASSIFIED ONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470. 
UNCLASSIFinDir 


(U) APPENDIX C: SCOPE AND METHODOLOGY 


(U/AFOUQ) The Office of the Inspector General (OIG) performed this audit from 
December 2013 to November 2014 in accordance with Generally Accepted Government Auditing 
Standards issued by the Comptroller General of the United States. Those standards require that 
the OIG support its work with sufficient, appropriate evidence that provides a reasonable basis 
for the findings and conclusions based on our audit objectives. The OIG assessed the internal 
controls deemed significant within the context of the audit objectives. During the audit planning 
work, the OIG noted that the acquisition strategy and structure of the Silver Eagle contract 
merited a closer look to addresses the National Reconnaissance Office’s (NRO’s) acquisition 
oversight process of the Silver Eagle acquisition planning, acquisition strategy, and contract 
implementation. Any information system data used by the auditors or included in this report for 
informational purposes was not audited, and is not significant to the audit findings. 


(U/7FOEUQ) To accomplish the audit, the OIG reviewed and documented relevant 
acquisition and IT laws and regulations, and NRO guidance, policies, and procedures. The OIG 
assessed whether the NRO governance implementation of the Silver Eagle acquisition included 
tracing the Acquisition Panel (ASP)-approved acquisition strategy for Silver Eagle through to 
contract implementation. This included evaluating the contractor’s compliance with the 
Statement of Work (SOW) and Department of Defense 8570.01-M, “Commercial Certification” 
requirements for individuals performing information assurance requirements, and assessing the 
potential Silver Eagle insider threat by testing and analyzing the NRO’s monitoring and 
polygraphing of privileged users consistent with the SOW. 


(UAFOEUQ) The OIG analyzed the Office of Contracts Compliance Review Reports and 
its recommendations for the Silver Eagle request for proposal and contract recommendations to 
determine implementation. The OIG assessed the implementation of the NRO’s Silver Eagle 
Government Quality Concept document, and the Silver Eagle contract. The contract assessment 
included evaluating the NRO’s oversight and contractor compliance with elements of the SOW, 
Award Fee Plan, payment terms, contractor’s labor hours, and portable electronic device pricing, 
Work Breakdown Structure, Contract Data Requirements List (CDRL), and Data Item 
Descriptions. 


(U77FOUWQ) The OIG analyzed the NRO and the acquisition office’s effectiveness in 
using its oversight mechanisms to oversee and verify Silver Eagle contract performance. The 
oversight mechanisms applied to the Silver Eagle included the Award Fee determinations, the 
contractor’s service level reporting; contractor’s delivery of the tool suite, and training and 
reference manual; and review and approval of Silver Eagle vouchers and invoices. 


(U7FOLUQ) The OIG evaluated the Communications Systems Directorate’s (COMM’s) 
Award Fee determinations for three six-month periods covering eighteen months of contract 
performance from | October 2012 through 31 March 2014; and the acquisition office’s 
assessment of the General Dynamics Information Technology, Incorporated (GDIT) Service 
Level Agreement (SLA) contract reporting from 1 October 2012 through 30 November 2013 
within the award fee process. The OIG evaluated the government’s acceptance and payment for 
the delivery of the GDIT’s CDRL 0010, the Tool Suite Design Description and Tool, and the 
GDIT Tool Training and Reference Manual. 
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(U/FQUQO\LTo determine the scope of the policies, procedures, and processes GDIT 
implemented, the OIG assessed additional oversight mechanisms. Included in the OIG 
assessment were the contractor’s delivery and government acceptance of CDRLs. The CDRLs 
consisted of the Program Management Plan, Program Security Management Plan, Configuration 
Management Plan, Communication Plan, Quality Control Plan, Organizational Conflict of 
Interest Plan, and Innovation Report, Program Monthly Review briefs, and the Business Monthly 
Review briefs for October and November 2013. The OIG also assessed GDIT’s Asset Inventory 
Report dated 17 September 2013, and GDIT’s Monthly Procurement Reports dated September 
and October 2013. 


(U//F9EUQ) To determine the effectiveness of the NRO’s review and approval of Silver 
Eagle vouchers and invoices, the OIG used a non-statistical sampling approach. The sample 
included one voucher or invoice and payment for each of the active Silver Eagle CLINs 0001, 
0002, 0003, 0004, 0005, 0006, 0007, 0011, 0014 for the period 1 July 2013 to 30 June 2014. 
The total universe for this period and these CLINs consists of 101 vouchers or invoices. 
In evaluating the vouchers and invoices, the OIG compared the pertinent contract payment terms, 
contractor’s labor hours and portable electronic device pricing to the applicable invoice. 
For CLIN 0010, the firm-fixed-price tool suite, the OIG evaluated 11 of 27 vouchers and 
payments. This sample included selecting the first voucher, skipping the second voucher, 
selecting the third voucher, skipping the fourth and fifth vouchers, selecting the sixth voucher, 
skipping the seventh voucher, selecting the eighth voucher, and continuing the same pattern for 
the remaining vouchers the OIG reviewed.'” The OIG did not use the results of a non-statistical 
sample to project our conclusion on the universe of payment vouchers. Still, the sample items 
represent the universe, and therefore provide a sufficient basis of validity to support our related 
audit findings and conclusions. The OIG also assessed the completeness and validity of the 
invoice data. 





'° (U//POLLQL The sample for CLIN 0010 consisted of eleven vouchers, voucher numbers 10001, 10003, 10006, 
10008, 10011, 10013, 10016, 10018, 10021, 10023, and 10026. 


26 
UNCLASSIFIED//FOR OFFICTAE-ESE-ONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470. 
UNCLASS IF LED 


(U) APPENDIX D: PATRIOT AUDIT RECOMMENDATIONS 


(U) In 2007, the NRO OIG issued a report on the Silver Eagle predecessor contract entitled Audit 
of the National Reconnaissance Office Management of the Patriot Program (Project No. 2006-008A), 
dated 8 June 2007. In this audit, the OIG reported significant performance challenges the NRO 
experienced. Table | provides details the recommendations and their closure dates. 


Table 1: (U) Audit of the NRO Management of the Patriot Program dated 8 June 2007 








Patriot Recommendations Closed 
#1a: Identify the NRO Information and Communications Technology (ICT) operational baseline 25-Mar-11 
and clearly define the Patriot contract baselines and scope for performance based and LOE. 
#1b: Document and incorporate the baselines and scope changes into the Patriot contract. 25-Mar-11 





#1c: Develop an accelerated plan to improve NRO ICT support by 

¢ eliciting proactive COMM senior management participation and commitment to Information 
Technology Infrastructure Library (ITIL), performance based and Patriot success, 25-Mar-11 
* ensuring resources to implement and complete customer SLAs and service catalog, and 
* establishing a schedule with milestones. 





#2a: Accelerate the customer outreach program to validate customer requirements and satisfaction. 2-Jun-10 





#2b: Keep users apprised of performance standards and planned Patriot changes including costs 


that will impact the customer. asl 


#3: Conduct periodic reviews of SLAs to ensure currency and validity in accordance with the 


contract 22-Jul-09 





#4a: Ensure the contractor implements the approved property plan to attain an approved property 














17-Nov-11* 

system. 
#4b: Hold the contractor accountable for required inventories or have the contractor provide 5-Jan-08 
consideration to the government for inventories not completed. 
#5: For future contracts, ensure that contractor property systems and plans are approved prior to 30-Nov-07 
transferring property responsibility to the contractor. 
#6a: Formally communicate to customers a schedule for requested services and educate them 

: Boccia E 20-Nov-09 
about the factors that impact the timeliness of responses to their requests. 
#6b: Survey customers one year from implementation to determine if the new COMM governance 20-Nov-09 


process is satisfying the intended timeliness and requirements status needed. 





#7: Hold Harris Technical Services Corporation (HTSC) accountable to provide the skilled 
personnel they indicate are required to meet the contract requirements through the award fee 20-Nov-09 
process or other means. 





#8: Require the contractor to provide and implement an action plan to achieve and sustain accurate 
invoicing and Contract Funds Status Report. 


#9: Address audit delays with Defense Contract Audit Agency Management. 27-Jul-07 


#10a: Ensure HTSC expedites an effective tool capability to support COMM ICT ITIL and 
performance based business objectives. 


17-Nov-11* 








20-Nov-09 





#10b: Ensure all contract changes are formally tracked and consideration documented. 20-Nov-09 








| #11: Obtain equitable consideration for delayed Patriot Enterprise Management System capability. 22-Jul-09 | 
#12: Ensure NRO Management Information Systems ecommendations are 
implemented on a timely basis. 











20-Nov-09 











*Recommendations closed because of the Patriot contract migration to the Silver Eagle contract. 
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(U) APPENDIX E: SILVER EAGLE AWARD FEE SUMMARY 


(U) Table 1 details the Silver Eagle contract award fee available and earned through 
30 September 2014.7° 


Table 1: (U) Award Fee Summary 

Available Overall 

Award Fee Period Award Fee | Percentage | Awarded 
Pool Awarded 


15 Aug 2011-31 Mar 2012 
1 Apr 2012 - 30 Sep 2012 (D)(4) 
1 Oct 2012 - 31 Mar 2013 
1 Apr 2013 - 30 Sep 2013 
1 Oct 2013 - 31 Mar 2014 
| Apr 2014 - 30 Sep 2014 
Total 


























A TR [te PN le 

















This table is unclassified 





= (U) Silver Eagle contract modification 60, attachment 3, Award Fee Plan 
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(U) APPENDIX F: MANAGEMENT COMMENTS 


UNCLASSIFIED //Fose 


NATIONAL RECONNAISSANCE OFFICE 
14675 Lee Road 
Chantilly, VA 20151-1715 


21 August 2015 
MEMORANDUM FOR INSPECTOR GENERAL 


SUBJECT: (U0) Draft Audit of the National Reconnaissance Office 
Management of the Silver Eagle Contract (Project Number 
2014-003 A) 


REFERENCE: {U) “Draft Audit of the NRO Management of the Silver 
Bagle Contract” (Project Number 2014-003 A), 
6 May 2015 


(U0) Thank you for the opportunity to review and comment on the 
subject draft report. The Communications Systems Directorate (COMM) 
provides the following addendum to the management comments signed on 1 
July 2015, based on Office of the Inspector General (OIG) revisions of 
the recommendations and further discussions. 


(U/ PRBMQL Recommendation #1 for the Director: Consistent with 
the tenants of the NRO’s Services Acquisition policy, assess the 


Silver Eagle contract to ensure that the current contract requirements 
align with the performance objectives as intended. Document the 
benefits and challenges of revising the current contract requirements. 
At a minimum, future services acquisitions should 


a. define each approved objective in measurable terms, 

b, define the current baseline performance level and performance 
goals, 

c. trace the approved performance objectives to the contract 
requirements (e.g. award fee criteria and service level 
agreements), and 

d. detail the provisions for measuring and reporting progress 
consistent with the approved performance objectives. 


(U/APSUQL Status: Open. COMM will assess the Silver Eagle 
contract to ensure that the current contract requirements align with 
the intent of the government acquisition as presented in the 
Application Service Provider (ASP) briefing on 19 August 2010. Since 
the Silver Eagle contract is in the fifth year (second option year) of 
the contract and will be secon transitioning to the future services 
acquisitions, COMM does not intend to change the requirements 
currently on contract. For future services acquisitions, COMM will 
take this recommendation into account and ensure the objectives as 
outlined above are addressed by contracts. Estimated completion date: 
30 November 2015. 
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UNCLASSIFIED//resa. 
SUBJECT: (U) Draft Audit of the National Reconnaissance Office 
Management of the Silver Eagle Contract (Project Number 


2014-003 A} 


(U/ P88Q) Recommendation #2 for the Director, COMM: Consistent 
with the NRO’s Service Acquisition policy and procedures, solicit, 
assess, and incorporate stakeholder requirements and priorities into 
the Silver Eagle baseline or replacement contract. 


(U/APOUQL Status: Recommend Closure. Regarding the future 
services acquisitions, COMM briefed the Transformers framework at 
several customer engagement forums, including the Directorates and 
Offices (Ds and Os}, the Information Technology Executive Council, the 
National Reconnaissance Office (NRO) Corporate Process (where it was 
approved), and NRO site commanders. In addition, COMM briefed the 
individual Transformers acquisitions to the Ds and Os as well as 
multiple Acquisition Strategy Councils. COMM will continue customer 
engagement up to and through contract award for each of the 
Transformers contracts. COMM can provide additional documentation 
upon request and signing of Non-Disclosure Agreements. 





(U/ APOUQL Recommendation #3 for the Director, COMM: Establish a 
Silver Eagle customer satisfaction SLA metric that considers NRO 
stakeholder input on the quality of service received under the Silver 
Eagle contract. 


(U/7Pe8Q), Status: Recommend Closure. The Silver Eagle contract 
includes 36 total Service Level Agreements (SLAs), 19 of which regard 
Customer Support Functions. Of these 19 SLAs, there are 2 specific 
SLAs that directly measure customer satisfaction: 2.4.1 Customer 
Satisfaction as Rated in Surveys after Ticket Resolution; and, 2.4.2 
Customer Satisfaction as Rated in the (b)(3) 
Annual Survey. These SLAs are tracked by the government and the 
contractor is held accountable by the award fee process if the SLAs 
are not met. For example, the Silver Eagle contractor has received a 
94 percent favorable rating out of surveys for the month of April (b)(3) 
2015, as well as a 94-95 percent favorable rating for the previous 3 
months. COMM has provided additional detail of these SLAs and surveys 
to the OIG. In addition to these SLAs, COMM recently completed a 
project to visit the Ds and Os front offices in order to ensure 
customer satisfaction of enterprise Information Technology services. 
All of the NRO front office Ds and Gs were evaluated and approximately 
































workstations were refreshed during this project. (b)(3) 











({U) Recommendation #4 for the Director, COMM in coordination with 
the Director, Office of Contracts: 


a. (UASBOUQL Develop and implement oversight activities that ensure 
accountability for FFP and performance based requirements. 
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SUBJECT: (U} Draft Audit of the National Reconnaissance Office 
Management of the Silver Eagle Contract (Project Number 
2014-003 A) 


b. (U/*PelQ) Assess whether an equitable adjustment is required for 
the Silver Eagle contractor’s performance shortfall for FFP and 
performance based requirements. 


(U/ 7PevQ) Status: Open. COMM holds the contractor accountable 
for Firm Fixed Price (FFP) requirements in a number of ways, 
including: daily, weekiy and monthly interactions with the 
contractor; Data Item Descriptions (DIDs)/Contract Data Requirements 
Lists (CDRLs); SLAs/Key Performance Indicators (KPIs); and, quarterly 
inputs from Government Points of Contact (GPOCs) across the NRO 
enterprise. However, the Silver Eagle contract does not have a 
Performance Work Statement or a Statement of Objectives and is 
therefore not a performance-based contract. The SLAs provide data for 
the government to evaluate the contractor’s performance as an 
indicator under the FFP contract and the Award Fee process. As 
documented in the attached remediation plan, COMM will reassess its 
oversight activities to ensure accountability for FFP and performance 
requirements. Should deficiencies be found, COMM will submit 
revisions or changes to the Fee Determining Official (FDO) and 
Contract Officer for consideration. Estimated completion date is 
31 July 2016. 


(U//POBQL Recommendation #5 for the Director, COMM in 
coordination with the Director, OC: Revise the Silver Eagle SOW to 
require all contractor personnel performing IA functions to have the 
proper and current IA certifications in accordance with ND 50-5 and 
Dod 8570.1-M. 


(U/7OUQ) Status: Recommend Closure. COMM has modified the 
Silver Eagle Statement of Work (SOW) to ensure NRO Directive (ND) 50-5 
and Department of Defense 8570.1-M requirements are consistent across 
the entire contract. SOW changes have been agreed upon by both the 
government and the contractor. The updated SOW has been provided to 
the OFG. 


U/ABQUQ) Recommendation #6 for the Director, COMM in coordination 
with Director, OC: Ensure that the Silver Eagle award fee 
determinations are consistent with the NAM and Award Fee Plan. 


(U/7POUQ), Status: Recommend Closure. The FDO award fee 
decisions are consistent with the NRO Acquisition Manual (NAM) and the 
Award Fee Plan. The Silver Eagle Award Fee Plan is a “zero-up” 
approach as required in the NAM for services contracts. COMM receives 
roughly 500 award fee comments each period from across the enterprise 
and evaluates every comment. There are 19 award fee sub-factors that 
are considered in the aggregate, which roll up to 4 major award fee 
factors. “Unsatisfactory ratings” have not been rewarded via award 
fee, and the contractor is held accountable where applicable. 
Historically, the Silver Eagle contract award fee has ranged from 82 
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SUBJECT: (0) Draft Audit ef the National Reconnaissance Office 
Management of the Silver Eagle Contract (Project Number 


2014-003 A} 


to 97.5 percent overall, and the contractor has received both 
“unsatisfactory” and “satisfactory” ratings in several sub-factors. 
However, these ratings have occurred in areas were other sub-factors 
offset that particular rating since they roll up to the major factors. 
Additionally, the Silver Eagle Award Fee Plan is more strict than most 
contracts in that the contractor must receive an overall rating of 
“Good” (80 percent) or higher in order to receive an award fee 
payment, otherwise the contractor receives “zero award fee” for that 
period. 


(U}) Recommendation #7 for the Director, COMM in coordination with 
the Director, OC: 


a. (U/ABOUQ) At a minimum, validate the requirement baselines, 
contract pricing, and payment terms detailed in the findings 
above for CLINs 0001, 0002, 0003, 0005, and 0007. Payment terms 
should detail the basis for payment and the method of 
verification the CO will use for payment. 


b. (U/*#OUQ) Assess whether an equitable adjustment is warranted 
for the Silver Eagle contractor’s inability to deliver the full 
scope on CLINs 0001, 0002, 0003, 0005, 0007, and 0010. 


(U/7FOUQ) Status: Open. In addition to daily, weekly, and 
monthly interactions with the contractor, COMM uses many different 
items as basis for payments: DIDs/CDRLs; SLAs/KPI; and quarterly 
inputs from GPOCs across the NRO enterprise. The FFP baseline, 
especially in the areas of hardware and user accounts constantly 
fluctuates. Trigger points have been in place since inception of the 
contract for this reason. COMM is currently working on a new DID that 
will provide additional detail on a portion of Contract Line~Item 
Numbers (CLINs) 0001 and 0003. COMM will also validate the other 
CLINS of concern. However, according to the contract, once the 
contractor performs the service in question, the government has 60 
days to determine whether the service is deemed unacceptable. After 
60 days the service is deemed acceptable and an equitable adjustment 
cannot be made. Estimated completion date is 31 October 2015. 


{U) Recommendation #8 for the Director, COMM in coordination with 
the Director, OC: 


a. (U/7PeUQ) Assess and document the price reasonableness for CLIN 
0006 PED service pricing for year two. 


b. (UAMBOUQ) Assess whether an equitable adjustment is warranted for 
CLIN 0006 PED service pricing for year two. 


(0/7Pesal Status: Open. The NRO Acquisition Center of 
Excellence has the original government assessment for price 
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reasonableness since it was accomplished during source selection, as 
mentioned in our 8 October 2014 e-mail response to the OIG. The 
fluctuations in Portable Electronic Devices (PEDs} services pricing in 
year two was due to the increased cost of domestic PEDs being used 
COMM identified this issue and conducted a cleanup of PEDs services 
and the cost of PEDs therefore decreased overall. The International 
PEDs were moved to 4 separate CLIN 0014 and became Cost Reimbursable, 
and the domestic PEDs were changed to a flat-rate plan, where 
applicable. The number of PEDs activated in a given month is 
documented in CDRL A012 Business Management Reviews and verified using 
the NRO Enterprise Tool Suite. COMM will reassess PED services 
pricing for year two and provide the information required. Estimated 
completion date is 31 October 2015. 


(U/FAPSUQL Recommendation #9 for the Director, COMM in 
coordination with the Director, OC: Assess vouchers 11032, 11031, and 
11034 and supporting information te determine and document whether an 
overpayment exists and the merit of obtaining reimbursement. 


(UAABOUQL Status: Recommend Closure. COMM has reviewed travel 
invoices 11031, 11032, and 11034, and determined that the invoices are 
free of errer, each claim is allowable per the Joint Federal Travel 
Regulations (JFTR} and no overpayment was made. COMM obtained all 
applicable documentation, including the Standard Form 1034, invoice 
summation, invoice back-up detail, and receipts. COMM verified that 
all the information on each document matched exactly; verified that 
the correct period of performance on the invoice coincides with the 
appropriate CLINs billed; verified that each travel request was 
approved by the Contracting Officer/Contracting Officers Technical 
Representative (CO/COTR) and the approval date was prior to the travel 
start date; verified that each travel cost was allowable per the JFTR; 
verified that each travel cost was billed within the appropriate CLIN 
matching when the travel occurred and approved by a CO/COTR; and, 
verified that appropriate notes were provided for any explanation 
required. All documentation for these invoices in question can be 
made available by request. COMM has provided the OIG with additional 
detail on the Silwer Eagle contract invoice review process. 
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(u//Posey, status: Open. COMM is aware of multiple findings 
within the Privileged User program. Part “a” of this finding will 
concurrently close when COMM resolves Recommendations #1 and #2 of the 
Audit of the Management Information Systems Privileged Users (Project 
2010-007 A} of 2010. For part “b” of this recommendation, the 
following is a joint statement from COMM ahd the Office of Security 
and Counterintelligence (OS&CI}: COMM will. work te ensure individuals 
assigned to privileged user roles are identified to OS4sCI upon 
assignment. OS&CI prioritizes the NRO polygraph testing popalation 
for: high risk personnel, including users when identified. Estimated 
completion date is 30 June 2016. 














(U) Contact COMM, Acting Director, 


























Staff at secure With .any 

















questions. 





Terry S. Duncan 
Director, Communications Systems 
Directorate 


Attachment: 


{U) Strategic Remediation Plan 
Silver Eagle Contract (UT*RSedQ, 


UNCLASSIFIED /}POUQ_ 





36 
UNCLASSIFIED/FPOR-OFFIGCHELESEONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470 
UNCL ASS irinp ur Y 


(U) Attachment 











(U) Audit of the National Reconnaissance Office 
Management of the Silver Eagle Contract 
(Project Number 2014-003 Aj 

ij Strategic Remediation Flan 

fi Version 1.0 











SF 
UNCLASSIFIED/ ONLY 


Approved for Release: 2017/01/13 C05095470 


Approved for Release: 2017/01/13 C05095470. 
UNCLASS YIU TOR Or teh 34 





MC Ser Rage Cores Sermed elon Fan 


Contents 


is) Recceommadation #1 for the Drector, Commuricatioms Seaton Gerectorate (OMG oo ccc cece 
OUT PSL Conmationt wih the tenants cf the Notions: Reconneeearce Otte Pe Barsices 
Lomeebon pol cy, peeees he 2 ver Eade contract te ermure thst the current cortrect requirerects 
a go wit the perfomance chert vee ae crended. Oucumpent tie Seefite aed chun lengien of 
soveng the current comtract mourenerts. Ate — tukure norvces ecoumtore ohord........2. 





ce ae agresments’, | es ea 
“cele ‘he prow ome tor naa ect epering ortairees commetent with the ecorcved 








wv) eo Drecter, COMM in coordination with Direcher, Othe of Contracts 
i ‘indus iia snr pauesinnunnsnnmusede 


& (PRE Cevwioo end: gngiamant eure mete ae that sree eccoumeatity tor —_ Fined 
Price (PEP) end performance Daaed requirement. i ast i aati eae 
S. CARS Annes wtiether ari santas adjuatrrant * enquired tor he Saae cage conwrctore 
performance shortia? for FFP and performance Desed requirements. : inoniainal 
i) Recommendation #7 tor the Director, COMM in. cocedingtion wits Clrmetin, GE. reanessnnnremntanmenil 
& (HTP Ato ereriemmn, veiciets the requirement Qeostines, contract pricing, end neyrrent tema 
GaheCNed an the Tniinge eueve for Clie 0004, OOS, S008, OOC5, and GOOT. Pasrneet tect 
iouidt dete the Dees for payment ond tive cnet of ver iiogtion the 00 will une tor pepe 
S. oy cy Acoewe whether on eguten © edheinent © werrarnied for the Diver Eage contvector's 
Inability te detver the tl acope om Cue D004 GOGD 0005, 0005, 0007. end Oto. will 
Aj) Recommendation #6 tor the Grecter, COMM In cocedinating wits DiECTIOT, OEE .cncnnsoninn vin 
« (0) SU: Aaeeee end document the peice resmonetionses for CLIN C000 Fortetie Bactronc 
Descce (PED) aervice pricing for yer ten. .. one si ita 


“OL conan nnethat an SOUND SIhARONE 8 RearEOd Te GUN CODE. wero 
prc? for year ten. 


ib) Recommendation: #20 for the Direct, conene in coordination wth the Dieoeten, Otten of Gacudty 
inet Comte tigen (0 SRCLY osc acnmnnonneneonnie a wilt 

















&. 








ani 











—ee, 


— 
—, 











38 
UNCLASSIFIED/FOR GFHGCHELESE ONLY 


Approved for Release: 2017/01/13 C05095470 





Approved for Release: 2017/01/13 C05095470. 
UNCLASS IF LED 








UNCLASS AED / Poe. 


daub of Siieer Eagts Contract Riermectstion Pan 


iL) Recommendation #1 for the Director, Communications 
Systems Directorate (COMM): 


(U)7PEAQ] Gonsistent with the tenants of the National Reconnaissance Office 
{NRO Vs Services Acquisition policy, asess the Silver Eade (SE) contract to 
ensure that the current contract requirements align with the performance 
objectives as intended. Document the benefits and challenges of revising the 
cumrent contract requirements. At a minimum, future services acquisitions 
should 


« define each approved objective in measurable terms, 

* define the current baseline performance level and perforn 

» trace the approved performance objectives to the contract 
requirements (2.2. award fee criteria and service level agreements), 
and 

* detail the provisions for measuring and reporting progress consistent 
With the approved performance objectives. 





ance goals, 











Silver Eagle Contracting Officer 
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(UL) Recommendation #4 for the Director, COMM in coordination 
with Director, Office of Contracts (OC): 

A (URI) Develop and implement oversight activities that ensure 
aooountability for FFP and performance based requirements. 

B. (URSLQ) Assess whether an equitable adjustment is required for the Silver 
Eagle contractor's performance shortfall for FFP and performance based 
requirements. 
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(U) Recommendation 47 for the Director, COMM in coordination 
with Director, OC: 

4 (UA RSS0) At a minimum, validate the requirement baselines, contract 
pricing, and payment terms detailed in the findings above for CLINs 0004, 
0002, 0603, 0005, and 0007. Payment terms should detail the basis for 
payment and the method of verfication the GO will use for payment. 

B. (ARGU) Assess whether an equitable adjustment is warranted for the 
Silver Eagle contractor's inability to deiiver the full scope on Contract Line Item 
Numbers (CLINs) 0001, 0002, 0003, 0005, 0007, and 0010. 
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(U) Recommendation #8 for the Director, COMM in coordination 
ay pack aapt OC: 
sy service icing for year Twi. 


B. (7 RSUO) Assess whether an equitable adjustment is warranted for CLIN 
0005 PED service pricing for year two. 


























(COM wi investigate amc voldete tie infiie! sources aeeection material, contact belie and 
quentives beled per device contend the price resacnabienses for CLIN C008 FED service 
mincing for year ten, Tamiiebie COMM eil enaiene end eemure the Govt i receewing bent 
weiue on the contract £ techmice! eveiuetion will be eubm ied te the! for consceration, 

fU) GOMIM will ciao esoese ehethier an equrtahie sdjusiment in aerated for CLIN GObe PED 
plc cabs ire rs ara ae, Conon OF aaron were mot mat bee ce 


T- Fy Scie ad A Gi: nc bn ao arn: Unies cihereee apecified i the corimaect, the: 
Qoeerrnnventt Wil nccect or regect.qensces enc meberiadi at the cece of deleery ae procnctty ms oteciscenis 
ether every, siglo ati nemiaerec nonin oo pRcrechepapecmnanlerr very, — eemmneriakcea 





42 


UNCLASSIFIED//FOR GFFIGHEL-USE ONLY _ 


Approved for Release: 2017/01/13 C05095470 


A d for Rel : 2017/01/13 C05095470. 
UNC psour Mee ee .) Y 








LALA ee, 


{U) Recommendation #10 for the Director, COMM in 
coordination with the Director, Office of Security and 














Counterintelligence (OS &Ci): 
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